{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.20"}],"component":"org.apache.sling:org.apache.sling.commons.json","cve_ids":["CVE-2022-47937"],"ecosystem":"Maven","epss":0.02187,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8j28-34qq-gmch","id":"tcs_01M5N8MXW38RM3JY6SK7W8K0RA","modified_at":"2024-03-29T14:48:46.905689Z","published_at":"2023-05-15T12:30:16Z","references":["https://osv.dev/vulnerability/GHSA-8j28-34qq-gmch","https://nvd.nist.gov/vuln/detail/CVE-2022-47937","https://github.com/apache/sling-org-apache-sling-commons-johnzon","https://issues.apache.org/jira/browse/SLING-6536","https://lists.apache.org/thread/sws7z50x47gv0c38q4kx6ktqrvrrg1pm","https://www.openwall.com/lists/oss-security/2023/05/15/2","http://www.openwall.com/lists/oss-security/2023/05/15/2"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-8j28-34qq-gmch","url":"https://osv.dev/vulnerability/GHSA-8j28-34qq-gmch"}],"summary":"Apache Sling Commons JSON bundle vulnerable to Improper Input Validation"}